Proactive Detection of Voice Cloning with Localized Watermarking
Not on the map. Why?
Abstract (arXiv)
In the rapidly evolving field of speech generative models, there is a pressing need to ensure audio authenticity against the risks of voice cloning. We present AudioSeal, the first audio watermarking technique designed specifically for localized detection of AI-generated speech. AudioSeal employs a generator/detector architecture trained jointly with a localization loss to enable localized watermark detection up to the sample level, and a novel perceptual loss inspired by auditory masking, that enables AudioSeal to achieve better imperceptibility. AudioSeal achieves state-of-the-art performance in terms of robustness to real life audio manipulations and imperceptibility based on automatic and human evaluation metrics. Additionally, AudioSeal is designed with a fast, single-pass detector, that significantly surpasses existing models in speed - achieving detection up to two orders of magnitude faster, making it ideal for large-scale and real-time applications.
Key facts. Cited by 67 papers in the map (data through 7 Oct 2026). Builds on 43 of its 74 references that are in the map. First posted on arXiv 30 Jan 2024.
Builds on
43 of 74 references.
References · 43
- 2016WaveNet: A Generative Model for Raw Audiocited by 1,710
- 2020HiFi-GAN: Generative Adversarial Networks for Efficient and High Fidelity Speech Synthesiscited by 1,139
- 2021SoundStream: An End-to-End Neural Audio Codeccited by 756
- 2023Neural Codec Language Models are Zero-Shot Text to Speech Synthesizerscited by 737
- 2022High Fidelity Neural Audio Compressioncited by 673
- 2023A Watermark for Large Language Modelscited by 667
- 2022AudioLM: a Language Modeling Approach to Audio Generationcited by 611
- 2021Conditional Variational Autoencoder with Adversarial Learning for End-to-End Text-to-Speechcited by 555
- 2023Simple and Controllable Music Generationcited by 480
- 2021VoxPopuli: A Large-Scale Multilingual Speech Corpus for Representation Learning, Semi-Supervised Learning and Interpretationcited by 455
- 2023High-Fidelity Audio Compression with Improved RVQGANcited by 423
- 2018Conv-TasNet: Surpassing Ideal Time-Frequency Magnitude Masking for Speech Separationcited by 400
31 more
- 2023Voicebox: Text-Guided Multilingual Universal Speech Generation at Scalecited by 373
- 2019MelGAN: Generative Adversarial Networks for Conditional Waveform Synthesiscited by 351
- 2022AudioGen: Textually Guided Audio Generationcited by 292
- 2023The Stable Signature: Rooting Watermarks in Latent Diffusion Modelscited by 289
- 2021YourTTS: Towards Zero-Shot Multi-Speaker TTS and Zero-Shot Voice Conversion for everyonecited by 277
- 2023NaturalSpeech 2: Latent Diffusion Models are Natural and Zero-Shot Speech and Singing Synthesizerscited by 233
- 2019Understanding Straight-Through Estimator in Training Activation Quantized Neural Netscited by 225
- 2020Artificial Fingerprinting for Generative Models: Rooting Deepfake Attribution in Training Datacited by 200
- 2020Real Time Speech Enhancement in the Waveform Domaincited by 183
- 2019Dual-path RNN: efficient long sequence modeling for time-domain single-channel speech separationcited by 182
- 2021FakeAVCeleb: A Novel Audio-Video Multimodal Deepfake Datasetcited by 179
- 2023Tree-Ring Watermarks: Fingerprints for Diffusion Images that are Invisible and Robustcited by 179
- 2023Speak, Read and Prompt: High-Fidelity Text-to-Speech with Minimal Supervisioncited by 167
- 2022Does Audio Deepfake Detection Generalize?cited by 129
- 2023Audiobox: Unified Audio Generation with Natural Language Promptscited by 120
- 2022ASVspoof 2021: Towards Spoofed and Deepfake Speech Detection in the Wildcited by 118
- 2023SoundStorm: Efficient Parallel Audio Generationcited by 111
- 2018Neural Voice Cloning with a Few Samplescited by 100
- 2023EXPRESSO: A Benchmark and Analysis of Discrete Expressive Speech Resynthesiscited by 93
- 2020Responsible Disclosure of Generative Models Using Scalable Fingerprintingcited by 90
- 2021TorchAudio: Building Blocks for Audio and Speech Processingcited by 83
- 2023Three Bricks to Consolidate Watermarks for Large Language Modelscited by 80
- 2023WOUAF: Weight Modulation for User Attribution and Fingerprinting in Text-to-Image Diffusion Modelscited by 51
- 2020A Spectral Energy Distance for Parallel Speech Synthesiscited by 42
- 2023WavMark: Watermarking for Audio Generationcited by 41
- 2022A3T: Alignment-Aware Acoustic and Text Pretraining for Speech Synthesis and Editingcited by 40
- 2022DeAR: A Deep-learning-based Audio Re-recording Resilient Watermarkingcited by 15
- 2023Single and Multi-Speaker Cloned Voice Detection: From Perceptual to Learned Featurescited by 10
- 2023Collaborative Watermarking for Adversarial Speech Synthesiscited by 6
- 2023Who is Speaking Actually? Robust and Versatile Speaker Traceability for Voice Conversioncited by 5
- 2019Audio Watermarking over the Air With Modulated Self-Correlationcited by 1
Built on by
Citing papers per year: 2024: 18; 2025: 28; 2026: 21.
67 papers.
Sort:
By area:
- 2024VoiceCraft: Zero-Shot Speech Editing and Text-to-Speech in the Wildcited by 118
- 2024Watermark Anything with Localized Messagescited by 49
- 2024Video Seal: Open and Efficient Video Watermarkingcited by 45
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
- 2024V2A-Mark: Versatile Deep Visual-Audio Watermarking for Manipulation Localization and Copyright Protectioncited by 27
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
- 2025SynthID-Image: Image watermarking at internet scalecited by 26
- 2025Streaming Sequence-to-Sequence Learning with Delayed Streams Modelingcited by 24
- 2024AudioMarkBench: Benchmarking Robustness of Audio Watermarkingcited by 19
- 2024Images that Sound: Composing Images and Sounds on a Single Canvascited by 17
- 2025Watermarking Autoregressive Image Generationcited by 15
38 more
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2025Survey on AI-Generated Media Detection: From Non-MLLM to MLLMcited by 12
- 2024Optimizing Adaptive Attacks against Watermarks for Language Modelscited by 11
- 2024Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?cited by 10
- 2025A Comprehensive Real-World Assessment of Audio Watermarking Algorithms: Will They Survive Neural Codecs?cited by 10
- 2024Meta Learning Text-to-Speech Synthesis in over 7000 Languagescited by 9
- 2025SoloSpeech: Enhancing Intelligibility and Quality in Target Speech Extraction through a Cascaded Generative Pipelinecited by 9
- 2024VoiceShop: A Unified Speech-to-Speech Framework for Identity-Preserving Zero-Shot Voice Editingcited by 7
- 2024AI-generated Image Detection: Passive or Watermark?cited by 7
- 2025SoK: How Robust is Audio Watermarking in Generative AI models?cited by 7
- 2024Textless Acoustic Model with Self-Supervised Distillation for Noise-Robust Expressive Speech-to-Speech Translationcited by 5
- 2025Guidance Watermarking for Diffusion Modelscited by 5
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarkingcited by 4
- 2024Audio Codec Augmentation for Robust Collaborative Watermarking of Speech Synthesiscited by 3
- 2025XAttnMark: Learning Robust Audio Watermarking with Cross-Attentioncited by 3
- 2025VoiceMark: Zero-Shot Voice Cloning-Resistant Watermarking Approach Leveraging Speaker-Specific Latentscited by 3
- 2026Disclosure By Design: Identity Transparency as a Behavioural Property of Conversational AI Modelscited by 3
- 2025De-AntiFake: Rethinking the Protective Perturbations Against Voice Cloning Attackscited by 2
- 2025The Impact of Audio Watermarking on Audio Anti-Spoofing Countermeasurescited by 2
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removalcited by 2
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audiocited by 2
- 2024Prevailing Research Areas for Music AI in the Era of Foundation Modelscited by 1
- 2024Watermarking Training Data of Music Generation Modelscited by 1
- 2025CloneShield: A Framework for Universal Perturbation Against Zero-Shot Voice Cloningcited by 1
- 2025Tell-Tale Watermarks for Explanatory Reasoning in Synthetic Media Forensicscited by 1
- 2025Multimodal Evaluation of Russian-language Architecturescited by 1
- 2026SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Modelscited by 1
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compressioncited by 1
- 2026The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detectioncited by 1
- 2026CRAW: Codec Robust Audio Watermarkingcited by 1
- 2025Local Differences, Global Lessons: Insights from Organisation Policies for International Legislationcited by 0
- 2025Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verificationcited by 0
- 2025Protecting Your Voice: Temporal-aware Robust Watermarkingcited by 0
- 2025SOLIDO: A Robust Watermarking Method for Speech Synthesis via Low-Rank Adaptationcited by 0
- 2025Unmasking Synthetic Realities in Generative AI: A Comprehensive Review of Adversarially Robust Deepfake Detection Systemscited by 0
- 2025Multi-bit Audio Watermarkingcited by 0
- 2025AWARE: Audio Watermarking with Adversarial Resistance to Editscited by 0
50 most cited of 67 All 67 (JSON)
- 2026Trustworthy synthetic visual media: Evidence across the media lifecycle28 Sep 2026
- 2026Tokens Change, Structure Endures: Spectral Watermarking for Generated Speech27 Sep 2026
- 2026From Scores to Evidence: Auditable Decisions Can Improve Speech Deepfake Detection8 Sep 2026
- 2026Where Does the Sound Go? Tracing Acoustic Information Loss in Audio-Conditioned LLMs5 Sep 2026
- 2026CRAW: Codec Robust Audio Watermarking2 Sep 2026
- 2026MoSign: Challenge-Response Motion-Watermark Authentication for Anonymous Virtual-Reality Users30 Aug 2026
- 2026Combining Self-Embedding Audio Watermarking with Ultra-Low-Bitrate Neural Codecs26 Aug 2026
- 2026A Training-Free Proactive Defense Against Partial Speech Manipulation via Self-Embedding Steganography26 Aug 2026
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTS23 Aug 2026
- 2026Watermark Forensics for Generative Models: An Information-Theoretic Perspective14 Jul 2026
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generation13 Jul 2026
- 2026The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detection22 Jun 2026
38 more
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivity19 Jun 2026
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortions10 Jun 2026
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio25 May 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026mAVE: A Watermark for Joint Audio-Visual Generation Models7 Mar 2026
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compression5 Mar 2026
- 2026SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models27 Feb 2026
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarking28 Jan 2026
- 2026Disclosure By Design: Identity Transparency as a Behavioural Property of Conversational AI Models27 Jan 2026
- 2025Smark: A Watermark for Text-to-Speech Diffusion Models via Discrete Wavelet Transform21 Dec 2025
- 2025Where is the Watermark? Interpretable Watermark Detection at the Block Level17 Dec 2025
- 2025UniMark: Artificial Intelligence Generated Content Identification Toolkit13 Dec 2025
- 2025HarmonicAttack: An Adaptive Cross-Domain Audio Watermark Removal26 Nov 2025
- 2025Multimodal Evaluation of Russian-language Architectures19 Nov 2025
- 2025EchoMark: Perceptual Acoustic Environment Transfer with Watermark-Embedded Room Impulse Response9 Nov 2025
- 2025AWARE: Audio Watermarking with Adversarial Resistance to Edits20 Oct 2025
- 2025SynthID-Image: Image watermarking at internet scale10 Oct 2025
- 2025Multi-bit Audio Watermarking2 Oct 2025
- 2025Guidance Watermarking for Diffusion Models26 Sep 2025
- 2025The Impact of Audio Watermarking on Audio Anti-Spoofing Countermeasures25 Sep 2025
- 2025Streaming Sequence-to-Sequence Learning with Delayed Streams Modeling10 Sep 2025
- 2025Tell-Tale Watermarks for Explanatory Reasoning in Synthetic Media Forensics6 Sep 2025
- 2025Unmasking Synthetic Realities in Generative AI: A Comprehensive Review of Adversarially Robust Deepfake Detection Systems24 Jul 2025
- 2025De-AntiFake: Rethinking the Protective Perturbations Against Voice Cloning Attacks3 Jul 2025
- 2025Watermarking Autoregressive Image Generation19 Jun 2025
- 2025VoiceMark: Zero-Shot Voice Cloning-Resistant Watermarking Approach Leveraging Speaker-Specific Latents27 May 2025
- 2025A Comprehensive Real-World Assessment of Audio Watermarking Algorithms: Will They Survive Neural Codecs?26 May 2025
- 2025SoloSpeech: Enhancing Intelligibility and Quality in Target Speech Extraction through a Cascaded Generative Pipeline25 May 2025
- 2025CloneShield: A Framework for Universal Perturbation Against Zero-Shot Voice Cloning25 May 2025
- 2025SOLIDO: A Robust Watermarking Method for Speech Synthesis via Low-Rank Adaptation21 Apr 2025
- 2025Protecting Your Voice: Temporal-aware Robust Watermarking21 Apr 2025
- 2025SoK: How Robust is Audio Watermarking in Generative AI models?24 Mar 2025
- 2025Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verification13 Mar 2025
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganography8 Mar 2025
- 2025Local Differences, Global Lessons: Insights from Organisation Policies for International Legislation19 Feb 2025
- 2025Survey on AI-Generated Media Detection: From Non-MLLM to MLLM7 Feb 2025
- 2025XAttnMark: Learning Robust Audio Watermarking with Cross-Attention6 Feb 2025
- 2024Video Seal: Open and Efficient Video Watermarking12 Dec 2024
50 newest of 67 All 67 (JSON)
- 2024SoK: Watermarking for AI-Generated Contentcited by 43
- 2025Watermarking Autoregressive Image Generationcited by 15
- 2024Optimizing Adaptive Attacks against Watermarks for Language Modelscited by 11
- 2024AI-generated Image Detection: Passive or Watermark?cited by 7
- 2025SoK: How Robust is Audio Watermarking in Generative AI models?cited by 7
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarkingcited by 2
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audiocited by 2
- 2024Watermarking Training Data of Music Generation Modelscited by 1
- 2026The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detectioncited by 1
- 2025Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verificationcited by 0
- 2026mAVE: A Watermark for Joint Audio-Visual Generation Modelscited by 0
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generationcited by 0
12 most cited of 14 All 14 (JSON)
- 2026Tokens Change, Structure Endures: Spectral Watermarking for Generated Speech27 Sep 2026
- 2026Watermark Forensics for Generative Models: An Information-Theoretic Perspective14 Jul 2026
- 2026MusicMark: A Robust Generative Watermarking Framework for Music Generation13 Jul 2026
- 2026The Watermark Shortcut: How Provenance Marking Sabotages Audio Deepfake Detection22 Jun 2026
- 2026Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio25 May 2026
- 2026Who Gets Flagged? The Pluralistic Evaluation Gap in AI Content Watermarking15 Apr 2026
- 2026mAVE: A Watermark for Joint Audio-Visual Generation Models7 Mar 2026
- 2025Watermarking Autoregressive Image Generation19 Jun 2025
- 2025SoK: How Robust is Audio Watermarking in Generative AI models?24 Mar 2025
- 2025Targeted Data Poisoning for Black-Box Audio Datasets Ownership Verification13 Mar 2025
- 2024Watermarking Training Data of Music Generation Models11 Dec 2024
- 2024SoK: Watermarking for AI-Generated Content27 Nov 2024
12 newest of 14 All 14 (JSON)
- 2024Images that Sound: Composing Images and Sounds on a Single Canvascited by 17
- 2025Guidance Watermarking for Diffusion Modelscited by 5
- 2026SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Modelscited by 1
- 2025SOLIDO: A Robust Watermarking Method for Speech Synthesis via Low-Rank Adaptationcited by 0
- 2025Smark: A Watermark for Text-to-Speech Diffusion Models via Discrete Wavelet Transformcited by 0
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTScited by 0
- 2026AudioNoisePrints: Model-free audio watermarking using spatial correlation in flow matching TTS23 Aug 2026
- 2026SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models27 Feb 2026
- 2025Smark: A Watermark for Text-to-Speech Diffusion Models via Discrete Wavelet Transform21 Dec 2025
- 2025Guidance Watermarking for Diffusion Models26 Sep 2025
- 2025SOLIDO: A Robust Watermarking Method for Speech Synthesis via Low-Rank Adaptation21 Apr 2025
- 2024Images that Sound: Composing Images and Sounds on a Single Canvas20 May 2024
- 2025Multimodal Evaluation of Russian-language Architecturescited by 1
- 2025Multimodal Evaluation of Russian-language Architectures19 Nov 2025
- 2024VoiceCraft: Zero-Shot Speech Editing and Text-to-Speech in the Wildcited by 118
- 2024Watermark Anything with Localized Messagescited by 49
- 2024Video Seal: Open and Efficient Video Watermarkingcited by 45
- 2024OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarkingcited by 35
- 2024V2A-Mark: Versatile Deep Visual-Audio Watermarking for Manipulation Localization and Copyright Protectioncited by 27
- 2024GS-Hider: Hiding Messages into 3D Gaussian Splattingcited by 26
- 2025SynthID-Image: Image watermarking at internet scalecited by 26
- 2025Streaming Sequence-to-Sequence Learning with Delayed Streams Modelingcited by 24
- 2024AudioMarkBench: Benchmarking Robustness of Audio Watermarkingcited by 19
- 2025SecureGS: Boosting the Security and Fidelity of 3D Gaussian Splatting Steganographycited by 14
- 2025Survey on AI-Generated Media Detection: From Non-MLLM to MLLMcited by 12
- 2024Steganalysis on Digital Watermarking: Is Your Defense Truly Impervious?cited by 10
12 most cited of 46 All 46 (JSON)
- 2026Trustworthy synthetic visual media: Evidence across the media lifecycle28 Sep 2026
- 2026From Scores to Evidence: Auditable Decisions Can Improve Speech Deepfake Detection8 Sep 2026
- 2026Where Does the Sound Go? Tracing Acoustic Information Loss in Audio-Conditioned LLMs5 Sep 2026
- 2026CRAW: Codec Robust Audio Watermarking2 Sep 2026
- 2026MoSign: Challenge-Response Motion-Watermark Authentication for Anonymous Virtual-Reality Users30 Aug 2026
- 2026Combining Self-Embedding Audio Watermarking with Ultra-Low-Bitrate Neural Codecs26 Aug 2026
- 2026A Training-Free Proactive Defense Against Partial Speech Manipulation via Self-Embedding Steganography26 Aug 2026
- 2026LambdaMark: Semantic Audio Watermarking for Robustness and Radioactivity19 Jun 2026
- 2026Feature-Aligned Speech Watermarking for Robustness to Reconstruction Distortions10 Jun 2026
- 2026Latent-Mark: An Audio Watermark Robust to Neural Codec Compression5 Mar 2026
- 2026Self Voice Conversion as an Attack against Neural Audio Watermarking28 Jan 2026
- 2026Disclosure By Design: Identity Transparency as a Behavioural Property of Conversational AI Models27 Jan 2026
12 newest of 46 All 46 (JSON)